PT-2021-15578 · Mcafee · Mcafee Total Protection

Published 2021-02-10 · Updated 2023-11-16 · CVE-2021-23876

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.30

Description: The issue allows a local user to bypass Remote Procedure Call in McAfee Total Protection, gaining elevated privileges and performing arbitrary file modification as the SYSTEM user. This could potentially cause Denial of Service via executing carefully constructed malware.

Recommendations: For versions prior to 16.0.30, update to version 16.0.30 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-23876

Affected Products

Mcafee Total Protection

References · 4

• https://osv.dev/vulnerability/CVE-2021-23876 · Vendor Advisory
• http://service.mcafee.com/FAQDocument.aspx?&id=TS103114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23876 · Security Note
• https://t.me/cvenotify/9718 · Telegram Post